Arrest made over data-stuffed eBay
laptop hard drive
Plods attempt to plug data leak
Police have made an arrest in connection with last week's eBay sale of a computer hard drive containing personal data.
The latest information security lapse has happened in Charnwood in Leicestershire, where taxpayers' personal details were found on a computer which was sold for £6.99. The details are said to include bank account information and sort codes.
Charnwood Borough Council has said that it is investigating the incident and has traced the hard drive and is awaiting its retrieval.
The Council said that it reported the matter to the police, who have now arrested someone in relation to the sale of the machine.
"The case has been referred to Leicestershire Constabulary as a criminal investigation and we can confirm that an individual has been arrested and is assisting the police with their enquiries," said a statement from the Council. "We have traced the hard drive and are currently retrieving it. The purchaser is co-operating with Charnwood and has stated that the data has not been distributed to any other parties."
Leader of Charnwood Council Richard Shepherd promised that a review into the data loss would be held.
“I regret the concern caused to Charnwood residents by this serious matter," said Shepherd. "We will give every assistance to the Police in their further investigations and I will personally ensure a thorough review is also completed by the Council to find out how this happened.”
Last week a machine was taken from a company which stores banks' records, Graphic Data. The laptop contained banking information on up to a million customers of Royal Bank of Scotland, NatWest and American Express.
Privacy regulator the Information Commissioner's Office last week urged organisations to create privacy protections in every new system they build because organisations are storing more and more information on individuals.
“For many years we have urged organisations to consider the impact on individuals’ privacy before developing new IT systems. However progress has been disappointing," said Jonathan Bamford, assistant commissioner at the ICO. "In our view organisations could be doing more to protect individuals’ privacy by adopting ‘privacy by design’."
Editor's note</strong: When this story first appeared it referred to a laptop being sold on eBay. We understand that only a hard drive was sold. We apologise for the error.
Copyright © 2008, OUT-LAW.com
OUT-LAW.COM is part of international law firm Pinsent Masons.
@ Serial Numbers
The smarter crims may well fake the s/n, the smarter buyer will certainly check to see if it's recognised by the manufacturer's website.
If you think things are getting bad
Daily, we are reading of yet another data loss, yet another drive being handed in to the police or the media which contains data which the possessor shouldn't have.
And yet, this is just the tip of the iceberg. For every drive/memory stick etc which gets handed in by an honest person (found it on a train, bought it on ebay etc) there are many more lost devices which remain unreported or not even realised as being lost. Not every "finder" is honest -surprise surprise!
And just think of all that unencrypted data knocking around in all these criminally negligent government offices, banks, private companies etc, where less-than-honest employees have already by now decided to run off a copy of the data for themselves. Not necessarily to sell-on or use immediately, but maybe just because they feel that to have knowledge/data is to have power. Who knows when all this illicitly run-off data will finally emerge out in the wild?
Come on, lets see all of these incompetent handlers-of-data (ie. those Responsible for the poor standards) thrown in prison. ENOUGH'S ENOUGH!
Well, perhaps after this, the story will at least cause criminals to format these drives before passing them along with your data on them...